CVE-2023-51454

Summary

CVE-2023-51454 is a critical Out-of-bounds Write vulnerability impacting DJI drone devices running the v2_sdk_service on port 10000. This issue lies within the my_tcp_receive function in the libv2_sdk.so library, which is used by the dji_vtwo_sdk binary. An attacker can exploit this vulnerability by delivering a crafted payload, leading to an unsafe memory write operation. Potential consequences include memory information leaks or arbitrary code execution. Affected DJI drone models include Mavic 3 Pro up to v01.01.0300, Mavic 3 up to v01.00.1200, Mavic 3 Classic up to v01.00.0500, Mavic 3 Enterprise up to v07.01.10.03, Matrice 300 up to v57.00.01.00, Matrice M30 up to v07.01.0022, and Mini 3 Pro up to v01.00.0620.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.